Hacker Attack on Charité: Patients’ and Employees’ Data Affected

TVS News AI, editorially supervised, presents Hacker Attack on Charité: Patients’ and Employees’ Data Affected.

The Berlin Charité has become the target of a hacker attack. During the unauthorized intrusion into its servers, personal contact data was stolen from employees and from patients who had sought an appointment online. The Charité said on Friday that all necessary measures to contain the damage had been initiated.

What Charité Says About the Attack

The affected employees

For Charité employees, the situation is clear: data was stolen from them. According to the hospital, it consisted of personal contact data. The report gives neither the number of affected employees nor the number of data records.

The Berlin Charité has become the target of a hacker attack. Data was stolen from employees. Patients who booked an appointment online are also affected.

The affected patients

The information is somewhat more specific for patients: Charité refers to patients who had sought an appointment online. The report does not distinguish between different types of patient data or describe a specific period during which the appointment booking would have to have taken place.

Online Appointment Booking Is the Specific Point of Reference

If you booked an appointment online at Berlin’s Charité or otherwise sought an appointment through the hospital’s online services, you belong, according to Charité, to the specifically named group of affected patients. The point of reference is therefore clear: this is not just a general risk affecting Berlin’s university hospital, but concerns contact data associated with appointments booked or requested online.

The hospital does not specify exactly what was taken from patients. The term “contact data” in the report does not allow any individual data fields, such as telephone numbers or email addresses, to be inferred. Nor does it limit the incident to particular appointments or particular patients.

It also remains unclear whether the data of employees and patients was affected together. The affected groups and the type of data taken are firmly established: personal contact data from employees as well as from patients who requested an appointment online.

Charité Has Initiated Measures to Contain the Damage

All necessary measures

Charité said that all necessary measures to contain the damage had now been initiated. In addition, all those affected are to be informed as quickly as possible. According to the hospital, it has therefore taken steps not only in its technical response but also in informing the affected people.

According to Charité, patient care at the hospital was not affected by the incident. This provides concrete reassurance for ongoing hospital operations, even though the report does not state how many people were affected or what other steps have been completed.

Berlin’s Charité had already taken its website offline as a precaution in the previous week. According to the hospital, the cyberattack was therefore not connected to the PHP security vulnerability that had caused the website to be taken out of service. This timing answers the question of a possible technical connection, without allowing any further details about the attack to be inferred from it.

What Is Known About the Incident — and What Is Not

The location, the form of the incident and the affected groups are firmly established. Charité in Berlin became the target of a hacker attack. Data was taken from its servers, specifically personal contact data from employees and from patients who had sought an appointment online.

The exact date of the attack, the number of people affected, the perpetrators’ technical method and the extent of the data leak are not yet established. The report also provides no information about any possible further use of the stolen information or concrete damage.

The report comes from rbb24 Inforadio dated 30 October 2026, 1:20 p.m. It states that Charité had reported the incident on Friday. It is not possible to infer from the term “contact data” which information was specifically affected or whether this immediately entails misuse. Such consequences are neither confirmed nor established by the available information.

Who Is Specifically Affected by the Incident

For Charité employees, the data leak was, according to the report, a direct part of the attack. The situation is equally clear for people who booked an appointment online: they belong to the specifically named group of affected patients. Whether you fall into either of these two groups is therefore determined not by speculation, but by your connection to Charité.

The factual assessment is therefore as follows: A hacker attack on the well-known Berlin university hospital has captured personal contact data from employees and patients. The available information does not quantify how large the group of affected people actually is or what consequences are possible. Further details about the Tagesschau report.